Permission denied executing sqlplus on Windows

[Rick Denoire]

After installing Oracle as the local administrator account, "normal"
users on the same PC can't start sqlplus or any other Oracle tool and
get a "permission denied" message.

What am I doing wrong?

Thanks a lot
Rico

[Daniel Morgan]

Rick Denoire wrote: After installing Oracle as the local administrator account, "normal" users on the same PC can't start sqlplus or any other Oracle tool and get a "permission denied" message. What am I doing wrong? Thanks a lot Rico

What you are doing wrong:

1. Didn't identify operating system software and version
2. Didn't identify Oracle version and edition
3. Didn't post the exact error message so anyone can tell what went wrong.
4. Didn't post the commands you entered that generated the message.

We don't even know if you started the database and the listener.

--
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan@x.washington.edu
(replace 'x' with a 'u' to reply)

[Hans Forbrich]

Rick Denoire wrote: After installing Oracle as the local administrator account, "normal" users on the same PC can't start sqlplus or any other Oracle tool and get a "permission denied" message. What am I doing wrong? Thanks a lot Rico

Too many unanswered questions (version of OS, version of DB, whether
this worked when you installed elsewhere, etc.)

Since you mention Windows (generically, although mentioning "local
administrator" eliminates Windows 98), I encourage you to review your
installation against Oracle's sample tutorial as given at
http://otn.oracle.com/obe/start/index.html That site provides the
installation for a few different versions of Oracle.

HTH
/Hans

[Rick Denoire]

Sorry, I wanted to put things so simple as possible (I don't think
that anything is wrong with Oracle)

Daniel Morgan <damorgan@x.washington.edu> wrote:
What you are doing wrong:1. Didn't identify operating system software and version
Windows 2000
2. Didn't identify Oracle version and edition
Oracle 9.2.0.1
3. Didn't post the exact error message so anyone can tell what went wrong.

If starting sqlplusw from the "Start->Execute" box:
"File sqlplusw (or one of its components) not found.
Check that the path and filename information are right are that all
necessary library components are available"

If starting sqlplusw including its path, I get a box, warning me:
"You may not have all necessary permissions in order to be able to use
all features of this program. You can execute this program as a
different account or as LAPTOP1\rico".

Here, I can click on one of two buttons, the first one corresponds to
the credentials active at this very time, the second includes some
fields to put the credentials - the "Administrator" name is already
put there.

If I choose the active credentials of the user "rico", I get a message
telling me that "The access to the given device, path or file has been
denied".

If I choose the Administrator account and put the password, everything
works fine.

Starting any other tool gives similar errors, which are caused by the
user not having the correct environment set and/or not having
permission at the OS level to access the files. I already KNOW that. I
just don't understand why this happens. The user rico has the
appropriate Registry keys set including ORACLE_HOME, ORACLE_SID etc.
as far as I can see.

I don't want to force the availability of Oracle to normal users by
changing access rights and hacking the Registry as the local
Administrator. My problem is not to try to fix this in this particular
situation, but to understand why this happened.

Oracle and an example DB were installed by the local Administrator.
Everything runs locally, no network involved. This is a very simple
setup. The DB has only been used to import statspack data from another
DB into the perfstat schema in order to investigate something.

4. Didn't post the commands you entered that generated the message.

See above.
We don't even know if you started the database and the listener.

Yes, everything is started and can be used - but only by the
Administrator account.


I have installed Oracle on different Windows versions before without
having this problem - and believe me, I have read the installation
procedure, which states clearly that setting up the variables and
creating the ORA_DBA group occurs automatically under Windows. No one
has been put in the ORA_DBA group, nothing has been tweaked etc.

I must have done a very, very stupid error.

Regards

Rico

[Rick Denoire]

Please see my reply elsewhere in this thread.
Yes, I would go and read the documentation if I had not done that
already. I did it BEFORE installation. I was surprised about the
problem, since installation went smooth and went back and read it
again AFTER installation. Not to mention that I have installed Oracle
a couple of times in the past, but mostly in an UNIX environment.

By the way, the sample tutorial files are lying in my laptop along
with tons of white papers, manuals, tips and tricks etc. This is a
quite new laptop, almost fresh installed with MS Office as the only
additional software.

Feeling mad

Rico

Hans Forbrich <forbrich@yahoo.net> wrote:
Rick Denoire wrote: After installing Oracle as the local administrator account, "normal" users on the same PC can't start sqlplus or any other Oracle tool and get a "permission denied" message. What am I doing wrong? Thanks a lot RicoToo many unanswered questions (version of OS, version of DB, whetherthis worked when you installed elsewhere, etc.)Since you mention Windows (generically, although mentioning "localadministrator" eliminates Windows 98), I encourage you to review yourinstallation against Oracle's sample tutorial as given athttp://otn.oracle.com/obe/start/index.html That site provides theinstallation for a few different versions of Oracle.HTH/Hans

[Daniel Morgan]

Rick Denoire wrote: Sorry, I wanted to put things so simple as possible (I don't think that anything is wrong with Oracle) Daniel Morgan <damorgan@x.washington.edu> wrote:What you are doing wrong:1. Didn't identify operating system software and version Windows 20002. Didn't identify Oracle version and edition Oracle 9.2.0.13. Didn't post the exact error message so anyone can tell what went wrong. If starting sqlplusw from the "Start->Execute" box: "File sqlplusw (or one of its components) not found. Check that the path and filename information are right are that all necessary library components are available" If starting sqlplusw including its path, I get a box, warning me: "You may not have all necessary permissions in order to be able to use all features of this program. You can execute this program as a different account or as LAPTOP1\rico". Here, I can click on one of two buttons, the first one corresponds to the credentials active at this very time, the second includes some fields to put the credentials - the "Administrator" name is already put there. If I choose the active credentials of the user "rico", I get a message telling me that "The access to the given device, path or file has been denied". If I choose the Administrator account and put the password, everything works fine. Starting any other tool gives similar errors, which are caused by the user not having the correct environment set and/or not having permission at the OS level to access the files. I already KNOW that. I just don't understand why this happens. The user rico has the appropriate Registry keys set including ORACLE_HOME, ORACLE_SID etc. as far as I can see. I don't want to force the availability of Oracle to normal users by changing access rights and hacking the Registry as the local Administrator. My problem is not to try to fix this in this particular situation, but to understand why this happened. Oracle and an example DB were installed by the local Administrator. Everything runs locally, no network involved. This is a very simple setup. The DB has only been used to import statspack data from another DB into the perfstat schema in order to investigate something.4. Didn't post the commands you entered that generated the message. See above.We don't even know if you started the database and the listener. Yes, everything is started and can be used - but only by the Administrator account. I have installed Oracle on different Windows versions before without having this problem - and believe me, I have read the installation procedure, which states clearly that setting up the variables and creating the ORA_DBA group occurs automatically under Windows. No one has been put in the ORA_DBA group, nothing has been tweaked etc. I must have done a very, very stupid error. Regards Rico

To diagnose problems it is best to not use Windows GUI.

Go to a DOS prompt, navigate to the Oracle BIN directory and perform the
following:

1. lsnrctl status
2. if not started lsnrctl start
3. sqlplus /nolog
4. conn / as sysdba
5. select count(*) from tab$;
6. if database not started shutdown followed by startup

Record any error messages.

The above assumes you are logged onto the machine as the same Windows
account as the one that installed the Oracle software.

Check in Control Panel, Users and Passwords, and make sure the Windows
account you are using is a member of the ORA_DBA group.

--
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan@x.washington.edu
(replace 'x' with a 'u' to reply)

[Rick Denoire]

Daniel Morgan <damorgan@x.washington.edu> wrote:
To diagnose problems it is best to not use Windows GUI.
Go to a DOS prompt, navigate to the Oracle BIN directory and perform thefollowing:1. lsnrctl status2. if not started lsnrctl start3. sqlplus /nolog4. conn / as sysdba5. select count(*) from tab$;6. if database not started shutdown followed by startupRecord any error messages.The above assumes you are logged onto the machine as the same Windowsaccount as the one that installed the Oracle software.Check in Control Panel, Users and Passwords, and make sure the Windowsaccount you are using is a member of the ORA_DBA group.

Daniel,

Everything works fine. The problem is not whether the DB is up and
running and if it is "healthy".

Logged in to Windows using a "normal" account, which is not in the
ORA_DBA group, no tool (GUI or not GUI) can be used, it is not found
or the permissions are missing. You got it now?

Regards
Rico

[Hans Forbrich]

Rick Denoire wrote: Please see my reply elsewhere in this thread. Yes, I would go and read the documentation if I had not done that already. I did it BEFORE installation. I was surprised about the problem, since installation went smooth and went back and read it again AFTER installation. Not to mention that I have installed Oracle a couple of times in the past, but mostly in an UNIX environment. By the way, the sample tutorial files are lying in my laptop along with tons of white papers, manuals, tips and tricks etc. This is a quite new laptop, almost fresh installed with MS Office as the only additional software. Feeling mad Rico

I just created a test user on my Windows 2000 Professional laptop. User
TEST is defined as a "restricted" user. Subsequently I access Oracle
database on the same machine from that user with no problem.

However, I DO get "permission denied" when I try to start/stop database
service or listnener from the test user. This is, of course, as it
should be.

Other than a hooped install or not having the service & listener running
automatically using the installer's userid, the only thing I can think
of is you are using Windows 2000 Workstation rather than Professional or
Server. (In that case, you should expect to encounter difficulties, as
Oracle explicitly did not certify that one.)

[Daniel Morgan]

Rick Denoire wrote: Daniel Morgan <damorgan@x.washington.edu> wrote:To diagnose problems it is best to not use Windows GUI.Go to a DOS prompt, navigate to the Oracle BIN directory and perform thefollowing:1. lsnrctl status2. if not started lsnrctl start3. sqlplus /nolog4. conn / as sysdba5. select count(*) from tab$;6. if database not started shutdown followed by startupRecord any error messages.The above assumes you are logged onto the machine as the same Windowsaccount as the one that installed the Oracle software.Check in Control Panel, Users and Passwords, and make sure the Windowsaccount you are using is a member of the ORA_DBA group. Daniel, Everything works fine. The problem is not whether the DB is up and running and if it is "healthy". Logged in to Windows using a "normal" account, which is not in the ORA_DBA group, no tool (GUI or not GUI) can be used, it is not found or the permissions are missing. You got it now? Regards Rico

Got it.

Check the environment variables ORACLE_HOME and ORACLE_SID. One or both
is not set for the user.

--
Daniel Morgan
http://www.outreach.washington.edu/ext/certificates/oad/oad_crs.asp
http://www.outreach.washington.edu/ext/certificates/aoa/aoa_crs.asp
damorgan@x.washington.edu
(replace 'x' with a 'u' to reply)

[Rick Denoire]

Hans Forbrich <forbrich@yahoo.net> wrote:
I just created a test user on my Windows 2000 Professional laptop. UserTEST is defined as a "restricted" user. Subsequently I access Oracledatabase on the same machine from that user with no problem.

Thanks that you took the time!
Back to the question: Did you create TEST after installing the DB?
However, I DO get "permission denied" when I try to start/stop databaseservice or listnener from the test user. This is, of course, as itshould be.

Right.
Other than a hooped install or not having the service & listener runningautomatically using the installer's userid, the only thing I can thinkof is you are using Windows 2000 Workstation rather than Professional orServer. (In that case, you should expect to encounter difficulties, asOracle explicitly did not certify that one.)

I will check the installation log tomorrow, it should be there -
although I am 100% sure that the installation went well - I am using
it successfully, but only as the administrator.

It comes to my mind that this kind of problem began after we
introduced Windows 2000 and deprecated Windows NT. I will check the
version tomorrow.

A normal user can't even read the $ORACLE_HOME directory (access
denied).

Bye
Rico

[Hans Forbrich]

Rick Denoire wrote: Hans Forbrich <forbrich@yahoo.net> wrote:I just created a test user on my Windows 2000 Professional laptop. UserTEST is defined as a "restricted" user. Subsequently I access Oracledatabase on the same machine from that user with no problem. Thanks that you took the time! Back to the question: Did you create TEST after installing the DB?

Yes. Unfortunately I do not have any 'regular' users that were created
before the database.
However, I DO get "permission denied" when I try to start/stop databaseservice or listnener from the test user. This is, of course, as itshould be. Right.Other than a hooped install or not having the service & listener runningautomatically using the installer's userid, the only thing I can thinkof is you are using Windows 2000 Workstation rather than Professional orServer. (In that case, you should expect to encounter difficulties, asOracle explicitly did not certify that one.) I will check the installation log tomorrow, it should be there - although I am 100% sure that the installation went well - I am using it successfully, but only as the administrator.

On my W2K-Pro system, the owner (oracle) is in group ORA_DBA as well as
ADMINISTRATOR. Also, I do not have a domain set up.

It comes to my mind that this kind of problem began after we introduced Windows 2000 and deprecated Windows NT. I will check the version tomorrow. A normal user can't even read the $ORACLE_HOME directory (access denied).

One additional thought - I notice there is a diffferent version for
W2000 vs W2003. I do NOT know whether that is significant, but I need
to ask ... Any chance you installed the W2003?

Good luck.
/Hans

[Niall Litchfield]

"Rick Denoire" <100.17706@germanynet.de> wrote in message
news:k4ihvvsfgjggkvsdi7tq8i87776ivh9drf@4ax.com... Hans Forbrich <forbrich@yahoo.net> wrote: It comes to my mind that this kind of problem began after we introduced Windows 2000 and deprecated Windows NT. I will check the version tomorrow. A normal user can't even read the $ORACLE_HOME directory (access denied).

Hi

The normal permissions that get set on ORACLE_HOME did change as of 9.2 (or
maybe 9..0.1), However my understanding was that they changed to

Administrators +SYSTEM - Full Control
Authenticated Users - READ

Note that the EVERYONE group is no longer included. This normally shows up
with accounts with restricted rights (the classic being IIS ) not having
rights to the oracle executables. Not sure what the actual rights required
to be an 'authenticated' user are though.


--
Niall Litchfield
Oracle DBA
Audit Commission UK

[Rick Denoire]

"Niall Litchfield" <n-litchfield@audit-commission.gov.uk> wrote:

The normal permissions that get set on ORACLE_HOME did change as of 9.2 (ormaybe 9..0.1), However my understanding was that they changed toAdministrators +SYSTEM - Full ControlAuthenticated Users - READNote that the EVERYONE group is no longer included. This normally shows upwith accounts with restricted rights (the classic being IIS ) not havingrights to the oracle executables. Not sure what the actual rights requiredto be an 'authenticated' user are though.

I think you are hitting the point here. That is the only explanation
that makes sense. I am so frustrated on this trivial issue, that I
have a TAR open.

At least I know now that I did not mess anything up.

Regards
Rico